Maximo For Government vulnerabilities | LiveThreat CVE Feed

Product

Maximo For Government

by Ibm · last CVE Feb 18, 2020

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 1High 1Medium 11Low 0

Severity

All severities29 Critical1 High1 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Maximo For Government to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2013-3323	9.8	3%	Feb 18	A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the… Affected: 6.2; 7.1; 7.5
CVE-2015-0104	8.8	7%	Apr 24	IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and… Affected: 7.1
CVE-2015-0107	6.5	6%	Apr 24	IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and… Affected: 7.1
CVE-2016-5902	6.1	1%	Feb 8	IBM Maximo Asset Management is vulnerable to cross-site scripting Affected: 7.1; 7.5; 7.6
CVE-2015-7448	5.4	1%	Mar 12	SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0… Affected: 7.1; 7.1.1; 7.5
CVE-2015-5017	5.4	1%	Jan 3	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and… Affected: 7.1; 7.5
CVE-2015-7396	5.4	1%	Jan 2	The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1… Affected: 7.5
CVE-2015-7451	5.4	1%	Jan 2	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2,… Affected: 7.5
CVE-2015-5016	4.3	1%	Mar 27	IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain… Affected: 7.1; 7.5
CVE-2016-0222	4.3	1%	Mar 14	IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via… Affected: All versions, or not specified
CVE-2015-5051	4.3	1%	Jan 3	IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud… Affected: 7.5
CVE-2015-7452	4.3	1%	Jan 2	IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud… Affected: 7.5
CVE-2015-7487	4.1	0%	Jan 27	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and… Affected: 7.1; 7.5
CVE-2015-4966	–	2%	Nov 8	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-7395	–	1%	Nov 8	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-4967	–	1%	Oct 6	SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-4965	–	1%	Oct 6	maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-4944	–	1%	Oct 6	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-1934	–	1%	Oct 4	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-1933	–	0%	Oct 4	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +2 more
CVE-2015-0109	–	1%	Feb 18	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management… Affected: 7.1
CVE-2015-0108	–	1%	Feb 18	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management… Affected: 7.1
CVE-2014-6194	–	1%	Feb 17	Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0… Affected: 7.1; 7.5.0.0
CVE-2014-6102	–	0%	Feb 17	IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control… Affected: 7.1; 7.5.0.0
CVE-2014-4765	–	1%	Oct 2	IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and… Affected: 7.1; 7.5.0.0
CVE-2014-3025	–	1%	Jul 30	Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management… Affected: through 7.5.0.6; 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; +2 more
CVE-2014-0915	–	1%	Jul 30	Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management… Affected: through 7.5.0.6; 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; +2 more
CVE-2014-0914	–	1%	Jul 30	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1… Affected: through 7.5.0.6; 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; +2 more
CVE-2013-5402	–	1%	Dec 18	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for… Affected: 7.1; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; +1 more